SchedMD Slurm Competition Condition Problem Vulnerability

Schedmd SchedMD Slurm is an open source and highly scalable cluster management and job scheduling system for large and small Linux clusters from SchedMD Schedmd, USA. A security vulnerability exists in SchedMD Slurm versions prior to 19.05.8 and versions prior to 20.02.6 of the 20.x series, which...

SUSE-SU-2020:3506-1 Security update for slurm

This update for slurm fixes the following issues: - Updated to 20.02.6: CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. Added...

SUSE-SU-2020:3505-1 Security update for slurm

This update for slurm fixes the following issues: - CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891...

PT-2020-5854

Name of the Vulnerable Software and Affected Versions: Slurm versions 19.05.7 and earlier, 20.x before 20.02.6 Description: The issue is related to the exposure of sensitive information due to a race condition in a read operation on the /proc filesystem, affecting xauth for X11 magic cookies. Thi...

PT-2020-5855

Name of the Vulnerable Software and Affected Versions: Slurm versions prior to 19.05.8 Slurm versions 20.x prior to 20.02.6 Description: The issue is related to a buffer overflow in the PMIx MPI plugin of the SLURM resource management system. This allows a remote attacker to access confidential...

OPENSUSE-SU-2020:1468-1 Security update for slurm_18_08

This update for slurm1808 fixes the following issues: - Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user t...

openSUSE Security Update : slurm (openSUSE-2020-1421)

This update for slurm fixes the following issues : - Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user to...

openSUSE: Security Advisory for slurm (openSUSE-SU-2020:1421-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1421-1 Security update for slurm

This update for slurm fixes the following issues: - Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user to...

Security update for slurm (moderate)

openSUSE Security Update: Security update for slurm Announcement ID: openSUSE-SU-2020:1421-1 Rating: moderate References: 1172004 Cross-References: CVE-2020-12693 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for slurm fixe...

SUSE-SU-2020:2607-1 Security update for pdsh, slurm_20_02

This update for pdsh, slurm2002 fixes the following issues: Changes in slurm2002: - Add support for openPMIx also for Leap/SLE 15.0/1 bsc1173805. - Do not run %check on SLE-12-SP2: Some incompatibility in tcl makes this fail. - Remove unneeded build dependency to postgresql-devel. - Disable build...

SUSE SLES15 Security Update : slurm (SUSE-SU-2020:2598-1)

This update for slurm fixes the following issues : Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user to...

SUSE SLES12 Security Update : slurm (SUSE-SU-2020:2601-1)

This update for slurm fixes the following issues : Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user to...

SUSE SLES15 Security Update : slurm (SUSE-SU-2020:2602-1)

This update for slurm fixes the following issues : Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user to...

SUSE-SU-2020:2601-1 Security update for slurm

This update for slurm fixes the following issues: - Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user to...

SUSE-SU-2020:2600-1 Security update for slurm_18_08

This update for slurm1808 fixes the following issues: - Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user t...

SUSE-SU-2020:2599-1 Security update for slurm_18_08

This update for slurm1808 fixes the following issues: - Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user t...

SUSE-SU-2020:2598-1 Security update for slurm

This update for slurm fixes the following issues: - Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693 This fixes and issue where authentication could be bypassed via an alternate path or channel when message Aggregation was enabled. A race condition allowed a user to...

SUSE-SU-2020:1554-1 Security update for slurm_20_02

This update for slurm2002 to version 20.02.3 fixes the following issues: Security issue fixed: - CVE-2020-12693: Fixed an authentication bypass via an alternate path or channel bsc1172004...

Fedora: Security Advisory for slurm (FEDORA-2020-11d0cf302f)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...